Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier: 9FWn+cip8bommRLx0K423Eyc+8MY6RcDuQ4PcNO44CU=
Subject key identifier: F9:CF:B7:E4:B3:3A:B0:AF:B7:06:06:6C:EB:23:9B:2D:25:CE:CE:32
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 019679E925B15468B57A25B87AFAF1091283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 01:00:44 +0000
Manifest this update: Mon 28 Apr 2025 01:00:44 +0000
Manifest next update: Tue 29 Apr 2025 01:00:44 +0000
Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: wGFi2u9miNjw4k3ytBKIPqtmcg2a9qFJ5aVHuKH6No8=)
2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:25:b1:54:68:b5:7a:25:b8:7a:fa:f1:09:12:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Apr 28 01:00:44 2025 GMT
Not After : Apr 29 01:00:44 2025 GMT
Subject: CN=f9cfb7e4b33ab0afb706066ceb239b2d25cece32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:31:70:cd:c0:0b:ad:a0:70:58:a0:c1:49:
18:28:65:fc:06:d8:a9:ed:32:fb:99:f2:a8:af:6b:
ab:0b:da:6d:0e:9c:10:b7:4c:33:95:c0:7f:51:7f:
f2:36:6e:c5:94:c8:74:c3:a0:6b:8d:ef:72:d4:83:
f4:73:40:2f:4f:b4:01:dd:1f:5e:6c:fe:40:58:0f:
1c:7a:5a:d3:65:87:f9:41:3a:52:ed:e3:c1:d6:93:
10:39:f6:60:eb:a3:c2:b9:06:d3:64:b9:e9:15:20:
c9:9e:51:8f:5a:79:df:74:6f:6f:56:2c:07:a5:b2:
9e:cf:c5:77:21:bc:57:b1:67:ef:cb:c4:3a:17:e6:
f6:b9:a8:2b:55:71:4b:a9:d7:55:2b:2f:b9:cc:5a:
bf:3d:43:9d:9a:c6:9f:9f:dd:40:eb:44:ee:7e:67:
b4:e7:52:39:c0:cf:74:af:15:44:96:3f:46:f9:7e:
7c:f9:8e:29:80:fe:ab:f0:b5:14:4d:3e:5c:72:5a:
fe:f5:3f:50:59:f9:f1:82:5f:8c:70:b1:ae:a9:94:
aa:b8:71:b9:81:e7:b9:bb:b7:55:95:a1:70:cf:14:
95:41:6d:38:03:f0:ae:6b:5e:02:b3:4d:36:40:ae:
26:1f:54:7b:c5:30:bf:3e:95:26:44:6c:16:4e:eb:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:B7:E4:B3:3A:B0:AF:B7:06:06:6C:EB:23:9B:2D:25:CE:CE:32
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7a:fe:2b:5a:b3:d2:b7:c8:27:d7:74:70:52:df:ca:65:cf:
1a:75:44:c6:f5:ce:25:b7:f2:ea:a8:65:4f:28:3c:4b:93:9f:
42:e0:41:dc:55:d1:bf:01:22:fa:10:55:f6:1a:f4:f8:2e:b5:
82:29:34:f9:45:8f:1e:49:80:84:9a:01:69:5f:a3:b2:3c:39:
10:90:b7:ab:27:da:2a:e2:21:61:69:00:f5:46:63:84:55:a7:
7f:02:dd:cf:f5:2e:d4:41:ed:06:a4:59:66:52:df:5a:30:62:
2b:ab:98:9b:a5:89:14:03:d7:85:99:ad:8f:26:db:8b:4e:73:
9c:8a:4d:67:b9:97:a3:1e:28:af:9c:50:6d:b6:7e:b2:84:7e:
b3:01:be:57:08:81:66:1e:f3:1b:50:2f:49:0b:2a:55:78:60:
30:1a:ff:b5:fa:47:eb:c6:93:77:64:c7:c6:c7:83:52:d9:a6:
5b:f9:9a:8b:1f:a3:6c:c4:90:2b:3d:5a:15:5b:24:e5:15:b4:
e2:6f:35:cf:e2:44:66:8d:4e:04:58:70:da:ea:c1:4c:4d:10:
2c:71:77:f0:af:d2:7f:89:55:41:84:50:65:ba:16:32:d5:fd:
e3:41:16:7e:97:fa:bb:00:a2:d2:25:99:aa:04:2e:d5:15:56:
4d:d0:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:33:43 2025 by rpki-client